---
typeId: req
recordId: benac-enc-008
fields:
  title: Decryption as capability
  statement: Benac shall treat decryption, key unwrapping, key wrapping, and
    plaintext release as explicit capabilities mediated by the host.
  rationale: Packages and agents must not casually decrypt private data.
  verification: Package without decryption grant cannot read plaintext blob.
  testable: true
  status: draft
  area: BENAC-ENC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.6 Encryption, decryption, and disclosure control
  order: 62
---
